Are passwords required?

2006-12-26 Thread Wendy Smoak
In 1.1-SNAPSHOT, on 'Create New User', I can create an account with no password, even though the two password fields have asterisks displayed next to them. If I then edit the user and uncheck the 'Change Password Next Login' box, the user can log in without a password. Should this be possible?

Re: Are passwords required?

2006-12-26 Thread Jesse McConnell
imo, yes :) only the administrator has the ability to make those decisions and they ought to be allowed to do it... we restrict it already that users are not by default allowed to make empty passwords but with a but of configuration they should be allowed to not have passwords, if that is the

Re: Are passwords required?

2006-12-26 Thread Wendy Smoak
On 12/26/06, Jesse McConnell [EMAIL PROTECTED] wrote: imo, yes :) only the administrator has the ability to make those decisions and they ought to be allowed to do it... Works for me, but let's fix the UI so the password fields are not marked with an asterisk if they're not actually

Re: Are passwords required?

2006-12-26 Thread Jason van Zyl
On 26 Dec 06, at 10:58 AM 26 Dec 06, Jesse McConnell wrote: imo, yes :) only the administrator has the ability to make those decisions and they ought to be allowed to do it... Definitely, as it might be used in a small group, in an already secure environment. Assume the driver has a